Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: TB33XWithvMXJFgNSWiUnbuj5t+xaU2Du7FE7gvE4HQ=
Subject key identifier: 9B:99:7E:53:D5:C3:15:E4:46:D3:D7:F7:8E:15:F7:F1:1F:D1:C6:2C
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 0132
Signing time: Fri 31 Jan 2025 03:43:56 +0000
Manifest this update: Fri 31 Jan 2025 03:43:55 +0000
Manifest next update: Fri 07 Feb 2025 03:43:55 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: D7kdubkm24Trk4rGKjak7pCZg+ogYCFM+mdMapWVdIA=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Jan 31 03:43:55 2025 GMT
Not After : Feb 7 03:43:55 2025 GMT
Subject: CN=679c46fb-277a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:96:9f:e8:5a:5a:de:d2:67:af:6a:bb:f2:
87:3a:e1:8e:1f:32:4d:cf:53:b7:f6:be:3d:83:6b:
7d:d8:41:1d:12:0d:88:07:39:56:8d:9d:9f:f2:22:
d3:79:f3:65:d1:b7:97:68:5a:d6:36:a7:7b:d5:65:
cc:87:81:54:43:b6:86:44:d3:f8:bb:67:de:cf:f2:
be:88:78:5c:57:15:e8:32:8e:e0:ca:22:d3:4b:eb:
47:01:6b:77:01:58:be:74:f5:07:cd:be:84:47:1f:
c5:dd:62:ae:f9:a5:3f:db:5c:72:3e:ac:f9:16:1d:
b5:5e:be:a8:9f:a5:bc:1e:c5:1f:4c:61:63:da:7d:
c1:ca:9e:b3:9a:a6:e0:01:c8:67:ca:04:d2:56:28:
dd:74:33:40:31:ae:bb:ed:a1:a3:f4:04:4c:5e:f0:
49:08:0c:53:65:b1:44:fc:e4:b0:a0:b6:69:59:64:
cb:c5:43:ae:7b:4d:f7:da:17:c0:b4:47:45:ae:47:
be:af:ed:55:6d:e1:66:16:6e:01:0e:91:bc:2a:3f:
69:c1:58:d8:66:b4:5c:83:d7:3d:d1:46:b5:2f:dd:
09:2c:8c:ad:4c:7b:1b:60:25:c4:25:5e:77:0d:b0:
17:36:df:5a:53:5a:5f:f1:0a:9a:2f:ee:5b:ea:bf:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:7E:53:D5:C3:15:E4:46:D3:D7:F7:8E:15:F7:F1:1F:D1:C6:2C
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:a7:c6:72:70:10:b0:96:65:12:d2:68:55:00:ac:ca:76:
ec:95:f3:80:ed:f9:eb:2f:c4:a7:cb:41:83:b7:65:0d:29:c2:
cf:ee:29:32:bb:1e:89:64:94:bd:28:35:73:10:75:76:8d:60:
b1:36:1d:e7:a0:d4:68:b5:4a:19:4c:1f:55:72:e0:f0:09:13:
7f:36:f5:11:2d:71:ab:fe:8f:ee:2b:98:11:0b:eb:e8:ff:3a:
4a:6a:ba:3c:1f:30:c1:80:b1:af:ad:be:94:cd:a3:85:11:dd:
5f:ae:7a:98:e0:45:ad:40:72:9b:70:97:b8:a1:22:0a:22:96:
73:8b:c2:51:82:83:74:f8:37:e4:be:a1:7b:d4:31:f7:ae:60:
15:fb:cd:ae:4d:3f:5b:fa:58:16:27:5a:7d:d9:93:96:f9:aa:
16:69:b7:fe:03:60:73:f1:73:8c:0b:ac:e5:93:eb:e8:93:1b:
ff:59:15:38:a1:2d:52:63:e5:70:14:e5:9b:26:c9:1f:80:08:
cb:41:d5:3c:03:43:76:9f:2b:6a:69:a9:7d:db:72:55:4c:97:
8d:3c:e3:e1:93:9b:fa:46:ee:13:b5:3f:6a:42:cf:2a:4e:57:
22:58:fc:8e:18:05:34:59:cf:11:bb:69:9e:36:fb:e7:8f:52:
c7:67:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:18 2025 by rpki-client